AMENDMENTS TO THE CLAIMS 

Claims Pending: 

• At time of the Action: Claims 1, 2, 5, 6, 9, 10, and 13-63 

• Amended Claims: Claims 9, 13, 30, and 47 

• Cancelled Claims: Claims 16, 33, and 50 

• After this Response: Claims 1, 2, 5, 6, 9, 10, 13-15, 17-32, 34-46, and 48-63 

This listing of claims will replace all prior versions and listings, of claims in the 
application. 

1 . (Previously Presented) A method comprising: 

determining at least one Squared Tate pairing for at least one hyperelliptic curve; 

wherein determining the Squared Tate pairing further includes: 

forming a mathematical chain for m, wherein m is a positive integer and an m- 
torsion element D is fixed on Jacobian of the hyperelliptic curve C; 

wherein the mathematical chain includes a mathematical chain selected from a 
group of mathematical chains comprising an addition chain and an addition-subtraction 
chain; 

cryptographically processing selected information based on the determined Squared 
Tate pairing; 

outputting validation of selected information based on the determined Squared Tate 
pairing; and 

determining a course of action in response to validation of selected information. 
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2. (Currently Amended) The method as recited in Claim 1, wherein the 
Squared Tate pairing is defined for at least one hyperelliptic curve C of genus g over a field 
K. 



3.-4. (Cancelled). 

5. (Previously Presented) A computer storage medium having computer- 
implementable instructions for causing at least one processing unit to perform acts 
comprising: 

calculating at least one Squared Tate pairing for at least one hyperelliptic curve; 

wherein determining the Squared Tate pairing further includes: 

forming a mathematical chain for m, wherein m is a positive integer and an m- 
torsion element D is fixed on Jacobian of the hyperelliptic curve C; 

wherein the mathematical chain includes a mathematical chain selected from a 
group of mathematical chains comprising an addition chain and an addition-subtraction 
chain; 

cryptographically processing selected information based on the determined Squared 
Tate pairing; 

outputting validation of selected information based on the determined Squared Tate 
pairing; and 

determining a course of action in response to validation of selected information. 
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6. (Previously Presented) The computer storage medium as recited in Claim 5, 
wherein the Squared Tate pairing is defined for at least one hyperelliptic curve C of genus g 
over a field K. 

7. -8. (Cancelled). 

9. (Currently Amended) An apparatus comprising: 

memory configured to store information suitable for use with using a cryptographic 
process; 

logic operatively coupled to the memory and configured to calculate at least one 
Squared Tate pairing for at least one hyperelliptic curve, and at least partially support 
cryptographic processing of selected stored information based on the determined Squared 
Tate pairing; 

wherein the logic is further configured to form a mathematical chain for m, wherein 
m is a positive integer and an m-torsion element D is fixed on Jacobian of the hyperelliptic 
curve C; 

wherein the mathematical chain includes a mathematical chain selected from a 
group of mathematical chains comprising an addition chain and an addition-subtraction 
chain; 

determining a hyperelliptic curve C of genus g over a field K, determining a 
Jacobian J(C) of the hyperelliptic curve C; 

a display device coupled to the logic for outputting validation of selected 
information; and 
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the logic determining a course of action in response to validation. 

10. (Previously Presented) The apparatus as recited in Claim 9, wherein the 
Squared Tate pairing is defined for at least one hyperelliptic curve C of genus g over a field 
K. 

11. -12. (Cancelled). 

13. (Currently Amended) A method comprising: 

determining a hyperelliptic curve C of genus g over a field K and a positive integer 

m; 

determining a Jacobian J(Q of the hyperelliptic curve C, and wherein each element 
D of J(Q contains a representative of the form A- g(Po), where A is an effective divisor of 
degree g; and 

determining a plurality of functions h JD that are iterative building blocks for the 
formation of a function h m D in order to evaluate v m which is a Squared Tate pairing; 

outputting validation of selected information based on the Squared Tate pairing; and 

determining a course of action in response to validation of selected information[.] ; 

wherein if P=(x, y) is a point on the hyperelliptic curve C, then -P denotes a point 
-P:=(x, -y), and wherein if a point P=(x, y) occurs in A and y * 0, then -P := (x-y) does 
not occur in A and a representative for identity will be s(P n). 
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14. (Currently Amended) The method as recited in Claim 13, wherein said the 
hyperelliptic curve C is over a field not of characteristic 2. 

1 5 . (Original) The method as recited in Claim 1 3, wherein 

for at least one element D of J(Q, a representative for iD will be A t - g(P 0 ), where 
At is effective of degree g. 

16. (Cancelled). 

17. (Original) The method as recited in Claim 16, further comprising: 

to a representative A t , associating two polynomials (a,, &,) which represent a divisor. 

18. (Original) The method as recited in Claim 1 6, further comprising: 
determining D as an w-torsion element of J(Q. 

1 9. (Original) The method as recited in Claim 1 8, further comprising: 

if j is an integer, then h j D = h j D {X) denoting a rational function on C with divisor 
(hj, D )=jA { -Aj-(<j-l)g)(P 0 ). 

20. (Original) The method as recited in Claim 18, wherein D is an /w-torsion 
divisor and A m = g(Po), and a divisor of h mD is (h mD ) = mA\- mg{P 0 ). 
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21 (Original) The method as recited in Claim 18, wherein h m _ D is well-defined 
up to a multiplicative constant. 



22. (Previously Presented) The method as recited in Claim 18, further 
comprising: 

evaluating h m _ D at a degree zero divisor E on the hyperelliptic curve C, wherein E 
does not contain Po and E is prime to A t . 

23. (Original) The method as recited in Claim 1 8, wherein E is prime to A t for all 
i in an addition-subtraction chain for m. 

24. (Original) The method as recited in Claim 22, wherein given A h Aj, and A i+J , 
further comprising determining a function iijj such that a divisor of uy is (uy) = Aj + Aj - 
A i+J -g(Po). 

25. (Original) The method as recited in Claim 22, further comprising: 
evaluating h jt dE) such that when j=l, h l D is 1. 

26. (Original) The method as recited in Claim 22, further comprising: 

given A h Aj, h LD {E) and h jD (E), evaluating uij to be (uiJ)=Ai + Aj - A i+J - g(P 0 \, and 
h i+j , D (E)= hi, D (E) hj, D {E) Ui j (E). 

27. (Original) The method as recited in Claim 13, further comprising: 
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determining a function (m ;j ) = A t + Aj - A i+j - g(Po)- 

28. (Original) The method as recited in Claim 27, wherein g = 2 and 
(ujj) = A( + Aj - Aj+j - 2(Po) is determined as follows 

greater than 2, otherwise, u u is determined as u (J (X) := d(x(X)), wherein d{x) is the 
greatest common divisor of three polynomials (a,(x), a/x), bj(x)+bj(x)). 

29. (Original) The method as recited in Claim 13, further comprising: 
determining a Squared Tate pairing for a hyperelliptic curves v m , for an w-torsion 

element D of a Jacobian J(Q and an element E of J(Q, with representatives 
(Pi)+(P 2 )+...+(P g ) ~ g(Po) and - +(Q g ) ~ g(Po), respectively, with each />,• and 

each Qj on the curve C, with P, not equal to ±Qj for all ij, determining that 

v m (A^):= (/« m , D ((^)-(-^) + (Q»)-(-Q») + ... + (O g )-(.a g ))^. 

30. (Currently Amended) A computer storage medium having computer- 
implementable instructions for causing at least one processing unit to perform acts 
comprising: 

determining a hyperelliptic curve C of genus g over a field K and a positive integer 

m; 

determining a Jacobian J(Q of the hyperelliptic curve C, and wherein each element 
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D of J(Q contains a representative of the form A- g(Po), where A is an effective divisor of 
degree g; and 

determining a plurality of functions h jD that are iterative building blocks for the 
formation of a function h m D in order to evaluate v m which is a Squared Tate pairing; 

outputting validation of selected information based on the Squared Tate pairing; and 

determining a course of action in response to validation of selected information [.] ; 

wherein if P=(x< v) is a point on the hyperelliptic curve C, then -P denotes a point 
-P:=(x, -y), and wherein if a point P=(x, v) occurs in A and y * 0, then -P := (x-y) does 
not occur in A and a representative for identity will be g(/V ). 

3 1 . (Previously Presented) The computer storage medium as recited in Claim 30, 
wherein the hyperelliptic curve C is not of characteristic 2. 

32. (Previously Presented) The computer storage medium as recited in Claim 30, 
wherein 

for at least one element D of J(Q, a representative for iD will be A t - g(Po), where 
At is effective of degree g. 

33. (Cancelled). 

34. (Previously Presented) The computer storage medium as recited in Claim 33, 
further comprising: 

to a representative Aj, associating two polynomials (a„ bi) which represent a divisor. 
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35. (Previously Presented) The computer storage medium as recited in Claim 33, 
further comprising: 

determining D as an w-torsion element of J(Q. 

36. (Previously Presented) The computer storage medium as recited in Claim 35, 
further comprising: 

if j is an integer, then h jiD = h jD (X) denoting a rational function on C with divisor 
(hj, D )=jA l -Aj-((j-l)g)(Po). 

37. (Previously Presented) The computer storage medium as recited in Claim 35, 
wherein D is an w-torsion divisor and A m = g(P 0 ), and a divisor of h m _ D is (h mD ) = mA\ - 
mg{P 0 ). 

38 (Previously Presented) The computer storage medium as recited in Claim 35, 
wherein h m D is well-defined up to a multiplicative constant. 

39. (Previously Presented) The computer storage medium as recited in Claim 35, 
further comprising: 

evaluating h m iD at a degree zero divisor E on the hyperelliptic curve C, wherein E 
does not contain P 0 and E is prime to A t . 
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40. (Previously Presented) The computer storage medium as recited in Claim 35, 
wherein E is prime to Aj for all i in an addition-subtraction chain for m. 

41 . (Previously Presented) The computer storage medium as recited in Claim 39, 
wherein given Aj, Aj, and A i+J , further comprising determining a function w (J - such that a 
divisor of u {J is (uy) = A t + Aj - A i+j - g(Po)- 

42. (Previously Presented) The computer storage medium as recited in Claim 39, 
further comprising: 

evaluating h jD (E) such that when j=\, h l D is 1. 

43. (Previously Presented) The computer storage medium as recited in Claim 39, 
further comprising: 

given Aj, Aj, hjoiE) and h jiD (E), evaluating Ujj to be (ujj)=Aj + Aj - A i+j - g(Po\, and 
h i+j , D {E)= hj, D (E) h lD {E) Ujj (E). 

44. (Previously Presented) The computer storage medium as recited in Claim 30, 
further comprising: 

determining a function (ujj) = Aj + Aj - A i+ j - g(Po)- 

45. (Previously Presented) The computer storage medium as recited in Claim 44, 
wherein g = 2 and 

(ujj) = Aj + Aj - Aj+j - 2(Pq) is determined as follows 
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greater than 2, otherwise, u u is determined as u t j (X) := d(x(X)), wherein d(x) is the 
greatest common divisor of three polynomials (a,(x), a/x), b,{x)+bj(x)). 

46. (Previously Presented) The computer storage medium as recited in Claim 30, 
further comprising: 

determining a Squared Tate pairing for a hyperelliptic curves v m , for an /w-torsion 
element D of a Jacobian J(Q and an element E of J(Q, with representatives 
(Pi)+(P 2 )+...+(P g ) - g(P 0 ) and (£>, )+(Q 2 )+. ..+(Q g ) ~ g(Po), respectively, with each P, and 
each Qj on the curve C, with P- t not equal to ±Qj for all ij, determining that 

v m (D,E):= + 

47. (Currently Amended) An apparatus comprising: 

memory configured to store information suitable for use with using a cryptographic 
process; and 
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logic operatively coupled to the memory and configured to determine a hyperelliptic 
curve C of genus g over a field K and a positive integer m, determine a Jacobian J(C) of the 
hyperelliptic curve C, wherein each element D of J(C) contains a representative of the form 
A- g(Po) and A is an effective divisor of degree g, and determine a plurality of functions 
h jyD that are iterative building blocks for the formation of a function h m D in order to evaluate 
v m which is a Squared Tate pairing; 

a display device coupled to the logic for outputting validation of selected information; 

and 

the logic determining a course of action in response to the validation[.] ; 
wherein if P=(x, y) is a point on the hyperelliptic curve C then -P denotes a point 
-P:=(x, -y), and wherein if a point P=(x, y) occurs in A and y * 0, then ~P := fr -y) 
does not occur in A and a representative for identity will be g(Pn). 

48. (Previously Presented) The apparatus as recited in Claim 47, wherein the 
hyperelliptic curve C is not of characteristic 2. 

49. (Original) The apparatus as recited in Claim 47, wherein 

for at least one element D of J(Q, a representative for iD will be A t - g(Po), where 
At is effective of degree g. 

50. (Cancelled). 
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51. (Previously Presented) The apparatus as recited in Claim 50, wherein the 
logic is further configured to, for a representative A h associate two polynomials (a„ bi) 
which represent a divisor. 

52. (Previously Presented) The apparatus as recited in Claim 50, wherein the 
logic is further configured to determine D as an /w-torsion element of J(C). 

53. (Previously Presented) The apparatus as recited in Claim 52, wherein the 
logic is further configured to, if j is an integer, then determine h jD = h jD {X) by denoting a 
rational function on C with divisor (h jD ) =jA\-Aj- ((/-l) g) (Po)- 

54. (Previously Presented) The apparatus as recited in Claim 52, wherein D is an 
m-torsion divisor and A m = g(Po), and a divisor of h m D is (h m D ) = mA\- mg(P 0 ). 

55 (Original) The apparatus as recited in Claim 52, wherein h m _ D is well-defined 
up to a multiplicative constant. 

56. (Previously Presented) The apparatus as recited in Claim 52, wherein the 
logic is further configured to evaluate h m D at a degree zero divisor E on the hyperelliptic 
curve C, wherein E does not contain P 0 and E is prime to A t . 

57. (Original) The apparatus as recited in Claim 52, wherein E is prime to A t for 
all i in an addition-subtraction chain for m. 
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58. (Previously Presented) The apparatus as recited in Claim 56, wherein given 
A h Aj, and A i+j , and wherein the logic is further configured to determine a function Ujj such 
that a divisor of is (uy) = Aj + Aj - A i+j - g(Po). 

59. (Previously Presented) The apparatus as recited in Claim 56, wherein the 
logic is further configured to evaluate h jD (E) such that when j=\, h\ D is 1. 

60. (Previously Presented) The apparatus as recited in Claim 56, wherein the 
logic is further configured to, given A h Aj, h it iJJE) and h jD (E), evaluate My to be (uij)=Ai + Aj 
- A i+J - g(P 0 ),, and h i+j . D (E)= h^E) h lD (E) u u (£). 

61. (Previously Presented) The apparatus as recited in Claim 47, wherein the 
logic is further configured to determine a function (»,_,) = Aj + Aj - A i+J - g(Po)- 

62. (Previously Presented) The apparatus as recited in Claim 61, wherein g = 2 

and 

(UiJ) = Ai + Aj - A i+ j - 2{Pq) is determined by the logic as follows 

, , "new (*(*)) 

greater than 2, otherwise, Ujj is determined as uy (X) := d(x(X)), wherein d{x) is the 
greatest common divisor of three polynomials {a,{x), aj{x), bj(x)+bj(x)). 
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63. (Previously Presented) The apparatus as recited in Claim 47, wherein the 
logic is further configured to determine a Squared Tate pairing for a hyperelliptic curves v m , 
for an m-torsion element D of a Jacobian J(C) and an element E of J(Q, with 
representatives (P l )+(P 2 )+...+(P g ) - g(P 0 ) and (Qi)+(Q 2 )+. . .+(Q g ) ~ g(Po), respectively, 
with each P t and each Qj on the curve C, with P, not equal to ±Qj for all i, j, and to 
determine that 
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